This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json) Hash identifier: HHZFqhW4oGdmFqXQjAoWdJE0ys48uo8yIixbe7cVryQ= Subject key identifier: C0:0A:EE:C5:1D:E0:34:D3:15:42:CB:E3:3B:19:81:B5:FC:0D:A1:64 Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Certificate serial: 7DBCCBFDBFF601AB2F58474ECF36731C9890F873 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft Manifest number: 01FA Signing time: Sun 21 Dec 2025 16:53:14 +0000 Manifest this update: Sun 21 Dec 2025 16:48:14 +0000 Manifest next update: Thu 25 Dec 2025 04:15:14 +0000 Files and hashes: 1: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: 7nEAuR8N4zrBrIUZiFrpesVkp2t++4P/SOZO6QRtvsU=) 2: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: qsAO4cOsO4ax3oPbTen8Sd837s3C+50yjyG9ueyoUI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:bc:cb:fd:bf:f6:01:ab:2f:58:47:4e:cf:36:73:1c:98:90:f8:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Validity Not Before: Dec 21 16:48:14 2025 GMT Not After : Dec 25 04:15:14 2025 GMT Subject: CN=C00AEEC51DE034D31542CBE33B1981B5FC0DA164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:16:44:da:77:52:28:38:3d:2e:e8:9c:68: 80:99:46:30:00:77:28:f3:20:2a:25:b3:2f:c1:18: 75:5a:94:57:e4:0a:42:b8:41:96:2d:ac:5b:4b:ad: 79:d5:f1:33:38:64:32:01:ac:ed:8d:cc:c3:75:65: 35:b2:34:cf:74:f9:43:79:10:13:2b:33:40:ad:bd: 2a:3b:44:ef:dc:b7:f1:fd:b6:5f:57:96:19:93:7e: 58:52:10:9e:81:31:df:83:4a:7c:90:94:75:35:48: ca:6a:f0:93:5c:4d:1b:5c:22:a9:9c:f4:99:74:65: 43:55:44:22:b5:a5:d2:53:bc:1f:ae:00:8f:65:dc: be:2c:ea:c4:ca:bc:cd:60:0b:00:3c:de:41:14:34: 06:8c:15:48:8f:24:ad:61:9d:0a:44:7d:88:ec:fe: 6f:a3:20:29:af:71:44:64:98:1f:20:2a:de:db:e7: ff:e8:a1:dd:6e:66:58:11:59:c4:c3:2c:60:6a:23: 16:6c:16:6f:e1:2b:b7:97:b8:1d:08:28:2c:83:17: 13:94:00:c3:63:95:7e:8b:23:47:e1:3d:29:49:0c: 97:b6:c8:e1:74:91:e5:7e:3c:a7:e6:30:c1:92:ee: c8:fc:7d:90:85:e3:66:59:39:bd:8e:a2:6e:97:f3: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0A:EE:C5:1D:E0:34:D3:15:42:CB:E3:3B:19:81:B5:FC:0D:A1:64 X509v3 Authority Key Identifier: keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f7:30:03:8a:55:c2:c9:3f:a1:b4:09:ba:c2:47:75:e1:b6: 05:b8:d7:55:94:03:07:0a:fd:e0:64:6c:f5:6c:44:b8:36:39: 1f:a8:c6:a1:ab:71:94:c5:7a:81:f0:dc:cb:1a:ae:92:9b:f6: 21:a6:a0:92:eb:9b:9e:16:20:ac:6e:e3:39:17:a3:5c:72:99: 12:89:7c:5d:4f:12:2b:b7:16:4c:79:d4:d0:48:41:86:55:21: 1b:4b:fb:f3:18:db:3b:6e:ad:b9:75:ba:a7:15:f7:8f:26:33: 5e:96:a8:b8:37:d0:fb:06:b5:40:fa:d4:e3:dc:3b:e9:44:69: e8:b3:42:d7:5c:78:76:fd:5b:a4:3c:96:4c:47:11:da:be:85: f7:f0:5f:66:6f:be:49:ef:a6:d6:17:c6:0a:2f:c8:99:35:5f: a1:20:d2:6b:54:c8:62:c7:cd:05:24:35:11:59:40:e1:0b:10: 60:80:ec:5d:c3:56:36:cd:2c:33:2d:d2:a9:98:01:ec:8e:38: 03:6e:de:0c:e6:84:7a:7e:d1:6f:f6:9d:20:04:0e:24:ac:5e: f8:de:b4:3c:e0:00:c7:03:3e:00:3c:ee:cd:4d:c6:16:85:1d: 62:84:9b:57:7b:1a:c4:95:96:0d:a3:b2:b8:d1:33:88:1d:19: d8:fd:42:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbzL/b/2AasvWEdOzzZzHJiQ+HMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgw RDZFQUI0RjAeFw0yNTEyMjExNjQ4MTRaFw0yNTEyMjUwNDE1MTRaMDMxMTAvBgNV BAMTKEMwMEFFRUM1MURFMDM0RDMxNTQyQ0JFMzNCMTk4MUI1RkMwREExNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDjhZE2ndSKDg9LuicaICZRjAA dyjzIColsy/BGHValFfkCkK4QZYtrFtLrXnV8TM4ZDIBrO2NzMN1ZTWyNM90+UN5 EBMrM0CtvSo7RO/ct/H9tl9XlhmTflhSEJ6BMd+DSnyQlHU1SMpq8JNcTRtcIqmc 9Jl0ZUNVRCK1pdJTvB+uAI9l3L4s6sTKvM1gCwA83kEUNAaMFUiPJK1hnQpEfYjs /m+jICmvcURkmB8gKt7b5//ood1uZlgRWcTDLGBqIxZsFm/hK7eXuB0IKCyDFxOU AMNjlX6LI0fhPSlJDJe2yOF0keV+PKfmMMGS7sj8fZCF42ZZOb2Oom6X8zVLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwAruxR3gNNMVQsvjOxmBtfwNoWQwHwYDVR0j BBgwFoAUhJ6eJApr9EI7Hn0iBdQeyA1uq08wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWViNDVkZS01MTgzLTRhM2EtYjA2ZC04YmI4ZDQ1MDZiMDYvMC84NDlFOUUyNDBB NkJGNDQyM0IxRTdEMjIwNUQ0MUVDODBENkVBQjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgwRDZF QUI0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFF QzgwRDZFQUI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJL3MAOKVcLJP6G0CbrCR3XhtgW411WUAwcK /eBkbPVsRLg2OR+oxqGrcZTFeoHw3MsarpKb9iGmoJLrm54WIKxu4zkXo1xymRKJ fF1PEiu3Fkx51NBIQYZVIRtL+/MY2zturbl1uqcV948mM16WqLg30PsGtUD61OPc O+lEaeizQtdceHb9W6Q8lkxHEdq+hffwX2ZvvknvptYXxgovyJk1X6Eg0mtUyGLH zQUkNRFZQOELEGCA7F3DVjbNLDMt0qmYAeyOOANu3gzmhHp+0W/2nSAEDiSsXvje tDzgAMcDPgA87s1NxhaFHWKEm1d7GsSVlg2jsrjRM4gdGdj9Qm4= -----END CERTIFICATE-----Generated at Mon Dec 22 01:57:56 2025 by rpki-client